$ rpki-client -vvf rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/C6EDD52EF4C011EAA7B25986C4F9AE02.roa File: C6EDD52EF4C011EAA7B25986C4F9AE02.roa (raw, json) Hash identifier: qyqw3i3GL6h/SgQPPtxyHJkhrm/uWWSr5nGAKt/Qapg= Subject key identifier: 2B:10:FD:65:32:DF:11:B5:E7:5A:EC:BE:C9:F2:AA:89:29:9F:3F:C2 Certificate issuer: /CN=A9195DE5/serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1 Certificate serial: 07C6 Authority key identifier: B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/C6EDD52EF4C011EAA7B25986C4F9AE02.roa Signing time: Mon 31 Mar 2025 21:21:30 +0000 ROA not before: Mon 31 Mar 2025 21:21:30 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 132883 IP address blocks: 103.87.8.0/24 maxlen: 24 103.87.9.0/24 maxlen: 24 103.87.10.0/24 maxlen: 24 103.87.11.0/24 maxlen: 24 116.204.208.0/24 maxlen: 24 116.204.209.0/24 maxlen: 24 116.204.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1990 (0x7c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195DE5 Validity Not Before: Mar 31 21:21:30 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67eb0759-e2da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0a:2e:60:d9:31:97:43:3f:a6:88:65:33:d3: 2b:64:86:c7:1e:fa:d2:58:72:6e:4a:f2:05:b8:c0: b0:39:ae:a2:70:d1:9f:5e:f6:68:89:ac:d5:a8:49: c6:4a:38:47:d5:85:bc:e0:3e:f8:4f:a6:50:f6:f2: 25:dc:a7:9f:e7:84:5d:f5:e5:3d:9e:05:26:6d:fe: 9a:cf:73:87:95:19:9f:21:a8:e2:3a:83:43:b2:b3: 59:b4:75:c9:11:8f:01:b3:13:15:59:e0:ef:8b:b1: 9e:89:51:4e:bf:b5:a3:9f:a4:1d:43:81:fc:98:03: 26:b9:d3:42:79:e2:fa:2c:1a:3e:94:07:25:49:71: 1a:10:09:2d:b7:95:36:df:57:43:ff:63:1d:7b:a2: 67:d4:14:ad:40:cd:03:28:87:d1:a1:ff:e8:37:d2: 79:f9:46:95:39:43:a4:3d:59:1c:84:75:6b:36:76: 4c:e1:f6:00:32:8d:ed:9a:e1:bc:af:ea:05:20:42: 35:29:02:c6:ee:c1:b0:ed:83:b9:f6:fb:31:ca:eb: 60:46:59:ae:b8:58:8e:5d:0d:cb:7f:69:26:50:31: d3:ea:ac:bf:ad:b1:88:22:32:18:8e:03:c3:da:ca: 87:16:c8:31:31:fc:51:14:4c:bd:79:ec:f9:5b:44: 6b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:10:FD:65:32:DF:11:B5:E7:5A:EC:BE:C9:F2:AA:89:29:9F:3F:C2 X509v3 Authority Key Identifier: keyid:B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/C6EDD52EF4C011EAA7B25986C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.87.8.0/22 116.204.208.0-116.204.210.255 Signature Algorithm: sha256WithRSAEncryption 81:b7:7b:cf:a5:ad:b6:66:e6:3b:bd:ce:d7:03:00:2b:34:b8: 93:2d:8a:b9:c5:3b:1e:a6:dc:2a:f5:68:94:88:a9:e4:2b:a0: a5:21:58:62:64:dc:84:92:91:01:a5:73:a8:17:c0:dd:11:04: 94:0d:1a:b9:e2:37:24:e7:c2:ae:06:15:01:04:73:4b:42:70: 0d:f2:23:98:55:e1:b0:c5:d2:6d:b2:57:4f:11:82:b5:ca:6a: 9f:de:05:bc:a4:04:19:7a:5b:23:f7:79:46:89:4c:6a:78:c8: cd:a1:61:c3:1b:e1:dd:09:34:5c:fc:08:5b:f3:be:8b:1a:ff: 10:aa:9c:ee:ba:52:b5:41:db:ee:86:3e:5c:c1:b1:00:91:6e: 0f:04:83:64:9e:00:69:57:39:07:27:87:e7:c5:4e:b1:46:31: 04:37:10:27:cb:4c:81:3c:15:d5:59:cf:5e:b1:22:5a:19:6a: e8:dc:94:ba:1e:a5:03:6d:81:ea:9d:44:fe:18:13:5a:2a:d4: b6:10:67:f2:fe:ea:8c:41:d7:4e:f8:27:2b:9a:43:a7:f5:24: 8b:22:c7:87:0c:7f:0f:01:18:28:b8:d0:77:0c:9e:ea:ba:63: 0f:8c:9f:1c:09:5e:5f:78:f8:34:b8:c4:6e:2b:65:7a:1c:cb: f6:96:c6:fd -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICB8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVERTUxMTAvBgNVBAUTKEI4NUJFRDk5QkY3NDBBQkFENUEzOTlDOURGNUZFOTk2 MkE2REU4RjEwHhcNMjUwMzMxMjEyMTMwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2ViMDc1OS1lMmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkwouYNkxl0M/pohlM9MrZIbHHvrSWHJuSvIFuMCwOa6icNGfXvZoiazVqEnG SjhH1YW84D74T6ZQ9vIl3Kef54Rd9eU9ngUmbf6az3OHlRmfIajiOoNDsrNZtHXJ EY8BsxMVWeDvi7GeiVFOv7Wjn6QdQ4H8mAMmudNCeeL6LBo+lAclSXEaEAktt5U2 31dD/2Mde6Jn1BStQM0DKIfRof/oN9J5+UaVOUOkPVkchHVrNnZM4fYAMo3tmuG8 r+oFIEI1KQLG7sGw7YO59vsxyutgRlmuuFiOXQ3Lf2kmUDHT6qy/rbGIIjIYjgPD 2sqHFsgxMfxRFEy9eez5W0RrqwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFCsQ/WUy 3xG151rsvsnyqokpnz/CMB8GA1UdIwQYMBaAFLhb7Zm/dAq61aOZyd9f6ZYqbejx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NURFNS9FM0VENjVEOEY0 QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENyclZvNW5KMzFfcGxpcHQ2 UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VGdnRtYjkwQ3JyVm81bkozMV9wbGlwdDZQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTVERTUvRTNFRDY1RDhGNEJFMTFFQTlDMzVGRTZBQzRGOUFFMDIvQzZFREQ1MkVG NEMwMTFFQUE3QjI1OTg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBAJnVwgwDAMEBHTM0AMEAHTM0jANBgkqhkiG9w0BAQsFAAOC AQEAgbd7z6WttmbmO73O1wMAKzS4ky2KucU7HqbcKvVolIip5CugpSFYYmTchJKR AaVzqBfA3REElA0aueI3JOfCrgYVAQRzS0JwDfIjmFXhsMXSbbJXTxGCtcpqn94F vKQEGXpbI/d5RolManjIzaFhwxvh3Qk0XPwIW/O+ixr/EKqc7rpStUHb7oY+XMGx AJFuDwSDZJ4AaVc5ByeH58VOsUYxBDcQJ8tMgTwV1VnPXrEiWhlq6NyUuh6lA22B 6p1E/hgTWirUthBn8v7qjEHXTvgnK5pDp/UkiyLHhwx/DwEYKLjQdwye6rpjD4yf HAleX3j4NLjEbitlehzL9pbG/Q== -----END CERTIFICATE-----Generated at Sat Apr 5 06:02:20 2025 by rpki-client